Nowadays, many Android applications enable data encryption to protect the security of private data, making it difficult for investigators to access the clear data even if they have already obtained the application database. Volatile memory dynamically presents the current state of applications and OS, which contains a store of valuable information including the plain text of application data, and it is a significant analysis object in the field of digital forensics. Over the past decade, some forensics researchers have proposed a number of volatile memory acquisition methods for Android mobile devices and have made valuable contributions. However, most of the existing methods are subjecting to severe restrictions in real investigation environment and only can be applied to pre-prepared devices, resulting in these methods are impractical. In order to address this problem, this paper proposes an Android application memory data acquisition method, called PASM, which can be applied to unprepared Android devices. PASM makes use of system-level data migration function provided by Android manufacturers to migrate and load the application private data into an intermediate device. The intermediate device is pre-ashed with a custom kernel providing the function of volatile memory forensics, so that the application private data can be acquired from the volatile memory of the intermediate device.We select thirty privacy-sensitive applications as the test objects and build seven different experiment scenarios to acquire the private data stored in memory image dumped by PASM. The experiment results show that PASMis able to acquire part of private data stored in volatile memory, and more importantly, PASM has the ability to overcome most of the limitations in the real world, which is more practical than existing Android memory acquisition methods.
To View the Base Paper Abstract Contents
Now it is Your Time to Shine.
Great careers Start Here.
We Guide you to Every Step
Success! You're Awesome
Thank you for filling out your information!
We’ve sent you an email with your Final Year Project PPT file download link at the email address you provided. Please enjoy, and let us know if there’s anything else we can help you with.
To know more details Call 900 31 31 555
The WISEN Team